jingle 0.6.8

SMT Modeling for Ghidra's PCODE
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86

use super::Residue;
use crate::analysis::cpa::state::AbstractState;

/// A simple reducer that records every visited destination state in a `Vec`.
///
/// This reducer does nothing as the CPA is running and at the end returns
/// a Vector of visited states given by the CPA
#[derive(Default)]
pub struct VecReducer;

impl<'a, S> Residue<'a, S> for VecReducer
where
    S: AbstractState,
{
    type Output = Vec<S>;

    /// Record the destination state index.
    ///
    /// The reducer stores the index of the destination state in the order
    /// transitions are observed by the CPA.
    fn new_state(
        &mut self,
        _source_idx: usize,
        _dest_idx: usize,
        _op: &Option<crate::analysis::pcode_store::PcodeOpRef<'a>>,
    ) {
    }

    /// When states are merged, we don't need to update our indices since
    /// the reached vector is updated in place by the CPA algorithm.
    fn merged_state(
        &mut self,
        _source_idx: usize,
        _merged_idx: usize,
        _op: &Option<crate::analysis::pcode_store::PcodeOpRef<'a>>,
    ) {
    }

    fn new() -> Self {
        Self
    }

    /// Return the collected visited states by indexing into the reached vector.
    fn finalize(self, reached: Vec<S>) -> Self::Output {
        reached
    }
}

/// Zero-sized factory for constructing `VecReducer` instances.
///
/// Exported as a public value `VEC` so callers can write:
/// ```ignore
/// let wrapped = analysis.with_residue(VEC);
/// ```
#[derive(Clone, Copy, Debug)]
pub struct VecReducerFactory;

impl VecReducerFactory {
    /// Const-friendly constructor for the factory.
    pub const fn new() -> Self {
        VecReducerFactory
    }
}

impl Default for VecReducerFactory {
    fn default() -> Self {
        VecReducerFactory::new()
    }
}

/// Ergonomic public constant factory value.
pub const VEC: VecReducerFactory = VecReducerFactory;

/// Implement the reducer factory trait to allow the CPA wrapper machinery to
/// instantiate a `VecReducer<'op, A::State>` for any analysis `A`.
impl<A> super::ReducerFactoryForState<A> for VecReducerFactory
where
    A: crate::analysis::cpa::ConfigurableProgramAnalysis,
    A::State: AbstractState,
{
    type Reducer<'op> = VecReducer;

    fn make<'op>(&self) -> Self::Reducer<'op> {
        VecReducer
    }
}